Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/65cdfa75-652e-3198-9d41-4b83dc5660e1.roa
File: 65cdfa75-652e-3198-9d41-4b83dc5660e1.roa (raw, json)
Hash identifier: BRnNo4wsMjBmNLLJdX5I9cx5FgwCV3dcdM++NVlkio4=
Subject key identifier: E5:BD:8E:DC:FB:70:C7:2F:A3:01:63:5F:89:AA:69:EA:E2:2B:18:9E
Certificate issuer: /CN=44e39417-e931-4514-89dc-a42b5b458fb5
Certificate serial: 010D0C9F43285848C2B64E0674488247D77B9B00
Authority key identifier: 44:9D:B2:B5:1C:CA:4C:8C:77:44:9C:66:77:47:66:84:A2:C6:5F:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/65cdfa75-652e-3198-9d41-4b83dc5660e1.roa
Signing time: Mon 03 Feb 2025 14:00:52 +0000
ROA not before: Mon 03 Feb 2025 14:00:52 +0000
ROA not after: Sun 04 May 2025 13:00:52 +0000
asID: 8075
IP address blocks: 168.137.64.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:b6:4e:06:74:48:82:47:d7:7b:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44e39417-e931-4514-89dc-a42b5b458fb5
Validity
Not Before: Feb 3 14:00:52 2025 GMT
Not After : May 4 13:00:52 2025 GMT
Subject: CN=5bdaeda3-bb27-4f9f-8dc7-baec02c9b274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4a:cf:1d:ad:a8:0f:80:18:9a:d8:aa:ae:ab:
fe:dc:1f:a6:d0:8f:2d:15:cb:9c:a7:c7:2c:c2:3f:
29:be:26:64:02:1b:04:cf:0a:71:44:ee:34:0d:11:
a0:0d:2e:32:d7:c7:84:46:ef:39:7a:9f:bd:4b:b0:
46:73:4b:c9:d0:c4:d5:7e:bd:9b:fc:b7:41:5e:c6:
d4:0a:67:73:9f:d1:89:f9:9d:45:ab:49:93:d7:26:
c0:8a:f2:02:a5:75:d0:4e:25:80:ad:c1:f5:c7:e2:
69:b5:c8:72:72:ed:c3:12:eb:c9:1b:56:12:ab:90:
de:1d:ee:89:b5:89:69:c0:39:b4:9e:77:af:63:4e:
6e:93:d2:bf:29:5c:d9:e8:3a:8a:62:a7:bf:c5:28:
70:89:56:7b:ce:75:be:e3:d8:16:45:71:24:1d:a8:
e7:69:6d:da:2e:6a:24:72:bc:27:67:13:68:09:37:
69:b3:97:11:7b:63:01:a5:76:7f:42:d5:16:bf:75:
2f:e3:45:c9:ee:a3:ad:9b:81:a5:53:b2:02:b5:ee:
38:e8:18:48:bb:d7:63:d7:45:11:0a:d5:9d:41:e4:
33:1a:68:0f:1f:5d:29:12:f1:10:1b:9a:21:ea:fd:
8a:1e:88:11:80:96:48:4f:bf:1e:87:79:43:91:5b:
d3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BD:8E:DC:FB:70:C7:2F:A3:01:63:5F:89:AA:69:EA:E2:2B:18:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/65cdfa75-652e-3198-9d41-4b83dc5660e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/44e39417-e931-4514-89dc-a42b5b458fb5.crl
X509v3 Authority Key Identifier:
keyid:44:9D:B2:B5:1C:CA:4C:8C:77:44:9C:66:77:47:66:84:A2:C6:5F:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5.cer
sbgp-ipAddrBlock: critical
IPv4:
168.137.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:0d:c3:b0:ea:c9:2d:4b:ea:36:68:97:dc:b2:83:58:c4:8b:
90:18:cc:0a:78:26:fe:b9:55:0e:d1:97:02:c7:dc:ad:42:1c:
5d:b5:7f:48:bf:fb:7a:f1:9a:ed:68:ef:b6:c5:d2:cb:45:e5:
11:14:c3:24:57:bf:eb:0f:b8:1e:04:a2:32:b3:4a:6c:27:01:
9b:0c:a2:99:f4:53:21:28:c6:08:9c:4f:26:2d:79:4d:6f:7a:
59:b9:f5:fc:ff:90:5b:d3:1e:3d:3d:65:aa:52:85:6d:ed:05:
f6:b1:57:b6:06:41:72:68:aa:05:3a:6e:bb:79:e7:4e:fa:77:
c9:73:0e:49:01:c3:f0:b2:99:ee:0f:4d:60:13:68:3f:26:60:
89:f8:9d:69:a6:88:be:f4:f2:01:a0:f6:aa:49:15:1d:f0:aa:
06:e4:4d:85:31:de:15:38:49:d6:3b:95:36:2b:74:ed:2c:e9:
97:7e:23:5d:98:89:94:ca:53:e9:9b:d5:64:7b:3f:80:35:4f:
f9:e9:e0:c6:ba:30:fd:90:83:fa:64:b8:c0:86:77:ec:14:96:
60:90:c5:cf:9f:37:5a:e4:24:e8:48:9d:b6:ca:4f:ab:c3:2d:
d3:5f:55:26:32:ec:99:b9:16:f6:cf:34:85:94:c5:08:44:23:
a0:be:8b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:52:03 2025 by rpki-client